Securing distributed electronic wallet shares

Abstract

Methods and systems are provided for securing distributed shares of an electronic wallet. An example method includes provisioning a plurality of devices each hosting an e-wallet share with enhanced privacy identification (EPID) private keys for the e-wallet share. A signature is posted for the e-wallet share to a blockchain. A determination is made as to whether the e-wallet share is compromised, and, if so, posting a revocation list comprising the signature for the e-wallet share to a blockchain.

What is claimed is: 
     
       1. An apparatus for securing distributed electronic wallet shares, comprising:
 a processor; 
 storage to store instructions to direct the processor to: create an e-wallet; 
 create the distributed e-wallet shares; 
 provision each of the distributed e-wallet shares with extended privacy identification (EPID) keys and a balance; 
 join the distributed e-wallet shares to the e-wallet; and 
 divide a transaction into a plurality of fractional transactions that are each assigned to one of the e-wallet shares; 
 an EPID server configured to generate EPID keys for the e-wallet and the e-wallet shares; and 
 a fractional key manager configured to direct the processor to sign each of the plurality of fractional transactions with a corresponding EPID key for an e-wallet share assigned to a fractional transaction. 
 
     
     
       2. The apparatus of  claim 1 , comprising a revocation list comprising credentials for revoked e-wallet shares, the instructions to direct the processor to enter credentials for revoked e-wallet shares into the revocation list based, at least in part, on input from a user. 
     
     
       3. The apparatus of  claim 1 , comprising a touchscreen configured to obtain user input. 
     
     
       4. The apparatus of  claim 1 , comprising a blockchain configured to hold transactions comprising e-wallet shares. 
     
     
       5. The apparatus of  claim 4 , comprising miners configured to examine the blockchain to verify transactions. 
     
     
       6. The apparatus of  claim 1 , the instructions to direct the processor to: issue a wake-up message from a transacting share to other e-wallet shares; and send a balance synchronization message to the other e-wallet shares. 
     
     
       7. The apparatus of  claim 6 , the instructions to direct the processor to:
 send an acknowledgment message from the other e-wallet shares after receiving a balance synchronization message; and 
 adjust a balance in an e-wallet, share based, at least in part, on the received balance synchronization message. 
 
     
     
       8. An apparatus for securing multiple distributed e-wallet shares, comprising:
 a processor; 
 storage to store instructions to direct the processor to: create an e-wallet; create distributed e-wallet shares; 
 provision the distributed e-wallet shares with extended privacy identification (EPID) keys and a balance; and 
 divide a transaction into a plurality of fractional transactions that are each assigned to one of the e-wallet shares; 
 a means to join the distributed e-wallet shares to the e-wallet; 
 an EPID server configured to generate EPID keys for the e-wallet and the e-wallet shares; and 
 a fractional key manager configured to direct the processor to sign each of the plurality of fractional transactions with a corresponding EPID key for an e-wallet share assigned to a fractional transaction. 
 
     
     
       9. The apparatus of  claim 8 , comprising a means for communicating a revocation of e-wallet shares. 
     
     
       10. The apparatus of  claim 8 , comprising a means for synchronizing balances among the distributed e-wallet shares. 
     
     
       11. The apparatus of  claim 8 , comprising a means to share the cost of a transaction among the distributed e-wallet shares.